🐾 - 🚨 Suspicious Python 🐍 HTTP Server - Spear Attack Possible - Suricata Rule 3300119 (pawpatrules)

🐾 - 🚨 Suspicious Python 🐍 HTTP Server - Spear Attack Possible

SID: 3300119Rev: 41 views

Sourcepawpatrules

CreatedSeptember 14, 2021

UpdatedDecember 21, 2022

Classificationpolicy-violation

alert http any any -> any any (msg:"🐾 - 🚨 Suspicious Python 🐍 HTTP Server - Spear Attack Possible"; flow:to_client, stateless; http.server; content:"SimpleHTTP/"; fast_pattern; nocase; content:"Py"; nocase; reference:url,https://docs.python.org/3/library/http.server.html; metadata:created_at 2021_09_14, updated_at 2022_12_21; sid:3300119; rev:4; classtype:policy-violation;)

References

url	https://docs.python.org/3/library/http.server.html

Metadata

created at2021_09_14

updated at2022_12_21

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!